There's No Such Thing as a HITECH compliant tool.

Posted January 27, 2010 09:44 AM by Jack    

ONC writes in its interim final rule, "Health Information Technology: Initial Set of Standards, Implementation Specifications, and Certification Criteria for Electronic Health Record Technology":

"While the capabilities provided by Certified EHR Technology may assist … in improving … technical safeguards in order to meet some or all of the HIPAA security rule's requirements or influence … the use of Certified EHR Technology alone does not equate to compliance with the HIPAA privacy or security rules."
Compliance requires a process that encompasses establishing policies and procedures, training staff, and maintaining these standards over time.  There is no such thing as a HITECH certified software tool.  You compliance is based on your actions and you need to be able to prove that you took appropriate actions to prevent breach.

Get compliant, stay compliant, and prove compliance with the Compliance Meter(tm)